$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa File: 4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa (raw, json) Hash identifier: SLTA2IE0OD4I5My9xe/urKrMyrHkasB7CexUA2kI1lI= Subject key identifier: A6:89:4B:34:1D:C0:6A:BB:F1:86:09:D4:88:F0:D2:72:3D:DC:23:18 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D560BABACFCE9C3AD0C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397222 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d5:60:ba:ba:cf:ce:9c:3a:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=33fd5150-cfbf-4197-ba65-a9584ca9804f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:73:30:e2:37:d7:96:8b:7f:7e:bf:54:7b: 8a:5e:74:a6:20:6c:d7:a2:a9:3d:ef:44:29:7c:9e: 5e:52:a5:7d:30:4d:0b:ef:05:01:84:72:0f:d4:05: fa:1e:b6:3f:4e:00:2b:57:cb:57:67:f4:1b:43:19: 6a:20:8b:98:8c:97:4b:d7:c7:c1:8b:74:60:a5:c1: a5:77:00:ef:db:b8:8a:3a:cc:f6:cd:19:0f:71:fc: ce:c7:3b:a3:e7:48:77:8f:e9:ad:18:41:80:b8:45: 27:c1:d7:46:95:c0:75:65:f2:1a:09:c6:80:9f:99: 26:06:0e:11:76:cf:a4:e1:25:bf:30:f9:2c:10:57: 3f:e0:08:ae:25:a0:ff:92:8a:96:33:5a:07:b6:07: 4a:28:2d:39:22:fa:52:4d:24:29:83:70:b9:a1:00: fc:4d:33:a8:31:fa:07:23:e7:88:15:4c:26:f6:98: fb:29:70:92:fb:da:69:25:2f:ad:d2:d8:f4:80:a2: b6:c2:f8:29:0d:e8:44:50:6b:1c:2f:f8:bb:23:20: d9:11:5d:19:26:29:5f:b8:7b:9e:bc:bb:7b:eb:bf: 74:65:97:90:02:1f:d8:27:68:c7:cb:92:c6:cc:35: c5:04:64:a2:a5:da:44:88:46:0c:90:47:02:19:15: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:4B:34:1D:C0:6A:BB:F1:86:09:D4:88:F0:D2:72:3D:DC:23:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a3:96:20:ba:bc:12:26:b6:6f:91:07:c3:4c:43:19:11:9b: f7:f2:f3:97:25:2c:f1:a8:53:f5:e0:29:e3:f4:43:dd:49:75: 95:0c:69:69:bf:1c:06:aa:a0:f5:a5:74:ef:3b:c2:ad:c7:e3: 3c:31:c8:4b:9b:77:d8:14:c3:65:a4:61:05:61:b4:06:2e:2b: a0:e0:e8:9d:4a:b6:fa:c2:e3:b1:1e:ff:08:86:4c:ef:09:0e: ef:80:cb:21:fc:0b:db:04:d1:61:45:aa:27:0f:4c:84:ef:c5: ef:25:90:16:d6:3c:6b:81:c3:22:84:2a:bd:92:bf:93:f3:30: 2f:f3:b2:37:dc:a5:f0:61:15:88:4c:00:b8:19:d0:de:af:b7: e9:7e:4e:26:06:ce:55:16:29:b9:4b:af:8e:ff:d8:d2:08:ae: c5:db:e1:ca:2c:5b:57:ce:83:e2:af:44:25:7f:33:1d:68:6c: 63:e1:8d:3e:76:d1:17:dd:57:99:e0:ec:16:c2:9c:ab:cb:ae: 6f:36:99:c2:35:46:66:b7:c4:52:8e:30:c1:4d:8c:46:6c:d6: 3a:05:87:8a:ca:a9:be:54:8f:2d:b0:0c:dd:93:29:cc:44:c3: 10:fa:91:01:1d:32:a7:d4:ec:04:36:6a:d0:13:77:35:d3:4e: 44:39:d9:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dVgurrPzpw60MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzNmZDUxNTAtY2ZiZi00MTk3LWJhNjUtYTk1ODRjYTk4MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNFzMOI315aLf36/VHuKXnSmIGzXoqk970Qp fJ5eUqV9ME0L7wUBhHIP1AX6HrY/TgArV8tXZ/QbQxlqIIuYjJdL18fBi3RgpcGl dwDv27iKOsz2zRkPcfzOxzuj50h3j+mtGEGAuEUnwddGlcB1ZfIaCcaAn5kmBg4R ds+k4SW/MPksEFc/4AiuJaD/koqWM1oHtgdKKC05IvpSTSQpg3C5oQD8TTOoMfoH I+eIFUwm9pj7KXCS+9ppJS+t0tj0gKK2wvgpDehEUGscL/i7IyDZEV0ZJilfuHue vLt76790ZZeQAh/YJ2jHy5LGzDXFBGSipdpEiEYMkEcCGRVhhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaJSzQdwGq78YYJ1Ijw0nI93CMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGIzMjgwOWUtZDEzZC0z Nzk4LTgzYTctZGIzNWE5YjBkOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6jliC6vBImtm+RB8NMQxkRm/fy85clLPGoU/XgKeP0Q91JdZUMaWm/ HAaqoPWldO87wq3H4zwxyEubd9gUw2WkYQVhtAYuK6Dg6J1KtvrC47Ee/wiGTO8J Du+AyyH8C9sE0WFFqicPTITvxe8lkBbWPGuBwyKEKr2Sv5PzMC/zsjfcpfBhFYhM ALgZ0N6vt+l+TiYGzlUWKblLr47/2NIIrsXb4cosW1fOg+KvRCV/Mx1obGPhjT52 0RfdV5ng7BbCnKvLrm82mcI1Rma3xFKOMMFNjEZs1joFh4rKqb5Ujy2wDN2TKcxE wxD6kQEdMqfU7AQ2atATdzXTTkQ52RQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:57 2025 by rpki-client